The Ip address of the box: 10.10.10.24 Observe the nmap ran gave two ports opened.

The ip address of the retired machine is 10.10.10.56 Ran nmap with below options: nmap -sC -sV -oA nmap_output

First ran the nmap recon tool on the box.

This box is very slow. However one has to deal with such boxes in real life, so tweak the tools where we can use them to deal with such boxes. Let’s start with reconnaissance Ran general nmap: nmap -sV -sC -oA general 10.10.10.76 sV = for service version detection, -sC…

html encoding: HTML encoding can be used for xss protection if we keep untrusted data inside html tags such as <div> but it will not work for the untrusted data put inside <script> tags or in links such as <img src=javascript: ….> or <a href=javascript:…..>. …

This is the first box I am doing after a long pause in my OSCP journey because of Covid-19 and other delays. So, Let’s dive in…………..! Ran nmap on the host, it gave output as below:

The IP address of the machine is: 10.10.10.40 Nmap: Nmap shows that smb server is installed on the host and on port 445 service is running. The name of the box “blue” suggests that it must be eternal blue vulnerability and also I have searched google with service running on port 445 which gives below exploit.

Ip address: 10.10.10.79 So our mighty tool nmap, this gives 22(ssh), 80 port and 443 are open. dirbuster gives on port 80, there is a folder dev. Notes have this below data To do: 1) Coffee. 2) Research. 3) Fix decoder/encoder before going live. 4) Make sure encoding/decoding is only done client-side. 5) Don't use…

Machine Ip: 10.10.10.34 Nmap reveals below ports and services. On the website present on 80 port nothing helpful is present. Netcat on port 7411 gives below: